364 matches found
CVE-2022-40117
CVE-2022-40117 affects Online Banking System v1.0, with a SQL injection in the cust_id parameter of /net-banking/delete_customer.php. Root cause: unsafe SQL handling in PHP/MySQL leads to potential unauthorized data access/modification. Impact per metrics: base CVSS 3.1 score 9.8 (CRITICAL); atta...
CVE-2022-40116
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search parameter at /net-banking/beneficiary.php...
CVE-2022-40117
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the custid parameter at /net-banking/deletecustomer.php...
CVE-2022-40115
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the custid parameter at /net-banking/deletebeneficiary.php...
CVE-2022-40115
CVE-2022-40115 affects Online Banking System v1.0, with a SQL injection vulnerability in /net-banking/delete_beneficiary.php via the cust_id parameter. The CVSS v3.1 vector is AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (base score 9.8; CRITICAL). Exploitation requires network access, no user interaction...
CVE-2022-40115
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the custid parameter at /net-banking/deletebeneficiary.php...
CVE-2022-40114
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the custid parameter at /net-banking/editcustomer.php...
CVE-2022-40114
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the custid parameter at /net-banking/editcustomer.php...
CVE-2022-40114
CVE-2022-40114 : Online Banking System v1.0 contains a SQL injection in the cust_id parameter of /net-banking/edit_customer.php. Root cause: unsanitized input in the parameter leads to arbitrary SQL execution. Impact per CVSS: Confidentiality, Integrity, and Availability all HIGH. Exploitation de...
CVE-2022-40113
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the custid parameter at /net-banking/sendfunds.php...
CVE-2022-40113
CVE-2022-40113 affects Online Banking System v1.0. A SQL injection vul nerability exists in the cust_id parameter of /net-banking/send_funds.php, caused by unsafeguarded input leading to data access compromise. The CVSSv3.1 base score is 9.8 (CRITICAL) with network attack vector, no privileges, n...
CVE-2022-40113
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the custid parameter at /net-banking/sendfunds.php...
Online Banking System SQL注入漏洞
Online Banking System is an online banking system developed using PHP and MySQL. version v1.0 of Online Banking System has a security vulnerability that stems from a SQL injection issue in the search parameter in the /net-banking/beneficiary.php location. No details of the vulnerability are...
Online Banking System SQL注入漏洞
Online Banking System is an online banking system developed using PHP and MySQL. v1.0 of Online Banking System has a security vulnerability that stems from a SQL injection issue in the custid parameter in the /net-banking/sendfunds.php location. No detailed vulnerability details are available at...
Online Banking System SQL注入漏洞
Online Banking System is an online banking system developed using PHP and MySQL. v1.0 of Online Banking System contains a security vulnerability that originates in the searchterm parameter in the /net-banking/transactions.php location. injection issue in the searchterm parameter at...
Online Banking System SQL注入漏洞
Online Banking System is an online banking system developed using PHP and MySQL. v1.0 of Online Banking System has a security vulnerability that originates from an SQL injection in the custid parameter of the /net-banking/deletecustomer.php location. issue. No details of the vulnerability are...
Online Banking System SQL注入漏洞
Online Banking System is an online banking system developed using PHP and MySQL. v1.0 of Online Banking System has a security vulnerability that originates in the /net-banking/deletebeneficiary.php location where the custid parameter has SQL injection issue. No detailed vulnerability details are...
PT-2022-25222 · Unknown · Online Banking System
Name of the Vulnerable Software and Affected Versions: Online Banking System version 1.0 Description: The issue is related to a SQL injection vulnerability. It can be exploited via the search term parameter at the "/net-banking/transactions.php" API endpoint. Recommendations: For Online Banking...
PT-2022-25218 · Unknown · Online Banking System
Name of the Vulnerable Software and Affected Versions: Online Banking System version 1.0 Description: The issue is related to a SQL injection vulnerability. It can be exploited via the cust id parameter at the "/net-banking/delete beneficiary.php" API endpoint. Recommendations: For Online Banking...
Online Banking System SQL注入漏洞
Online Banking System is an online banking system developed using PHP and MySQL. v1.0 of Online Banking System has a security vulnerability that stems from a SQL injection issue in the /net-banking/sendfundsaction.php location. No details of the vulnerability are available at this time...